Senior Cyber Risk & Exposure SME IV – DoD/IC TS/SCI

Invictus International Consulting, LLC.; Colorado Springs (CO); On-site; USD 120,000 - 160,000; Full time

Job summary

Invictus International Consulting, LLC. in Colorado Springs seeks a Lead Cybersecurity Risk & Exposure SME IV to serve as the senior expert for operational cyber risk, vulnerability analysis, and continuous monitoring supporting a DoD cyber defense mission.

You will establish methodologies for correlating exposure data, lead complex risk assessments, and provide actionable guidance to SOC leadership, incident responders, and system owners.

Qualifications

• Bachelor's degree in a technical field; 8+ years of relevant DoD cyber risk experience.
• Expert knowledge of vulnerability/exposure management and RMF.
• Experience with ACAS/Tenable, runZero, STIG/SCAP, and RMF processes.

Responsibilities

• Serve as the senior SME for operational cyber risk, vulnerability/exposure analysis, and continuous monitoring.
• Lead complex exposure and risk assessments, including development of plausible exploitation scenarios.
• Provide expert context to SOC leadership, analysts, and engineers during investigations and proactive activity.
• Own the SOC-side process for coordinating cyber findings with ISSOs/ISSMs and system owners.
• Establish checklists, guides, and reporting methods for exposure analysis and risk prioritization.

Skills

Vulnerability management

Exposure analysis

Threat-informed risk analysis

RMF controls

DoD monitoring

SOC coordination

Leadership

Mentoring

Incident response

Asset discovery tools

Education

Bachelor's degree

Tools

ACAS/Tenable

runZero

STIG/SCAP

POA&M

Job description

Invictus International Consulting, LLC. in Colorado Springs seeks a Lead Cybersecurity Risk & Exposure SME IV to serve as the senior expert for operational cyber risk, vulnerability analysis, and continuous monitoring supporting a DoD cyber defense mission.

You will establish methodologies for correlating exposure data, lead complex risk assessments, and provide actionable guidance to SOC leadership, incident responders, and system owners.